CVE-2020-8867

Name of the Vulnerable Software and Affected Versions OPC Foundation UA .NET Standard version 1.04.358.30

Description This issue allows remote attackers to create a denial-of-service condition on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the handling of sessions, resulting from the lack of proper locking when performing operations on an object. An attacker can leverage this issue to create a denial-of-service condition against the application.

Recommendations For OPC Foundation UA .NET Standard version 1.04.358.30, consider applying a patch or fix that addresses the lack of proper locking when performing operations on an object, specifically within the handling of sessions, to prevent the creation of a denial-of-service condition. At the moment, there is no information about a newer version that contains a fix for this issue.